EP2467992A2 - Method for configuring infotainment applications in a motor vehicle - Google Patents

Abstract

The invention relates to a method for configuring infotainment applications in a motor vehicle, comprising the following steps: providing a motor vehicle having at least one infotainment application and having a control unit, which is involved in the at least one infotainment application, providing a configuration interface of the control unit, by means of which configuration interface the control unit can be configured in such a way that the functional scope and/or a basic setting of the infotainment application is changed, providing a first configuration data server, which is arranged in the motor vehicle and is separate from the control unit in terms of devices and has an associated first configuration database for storing configuration data in a vehicle-related manner, providing a service center, which is arranged in a stationary manner at a distance from the motor vehicle and has a second configuration data server arranged there and a second configuration database for centrally storing configuration data, providing a wireless communication connection between the first configuration data server and the second configuration data server, providing a first modification interface, by means of which configuration data of the second configuration database having first access rights can be modified, providing a second Internet-based modification interface, by means of which configuration data of the second configuration database having second access rights that differ from the first access rights can be modified, recognizing modifications of the configuration data of the second configuration database, changing configuration data of the first configuration database by means of the wireless communication connection based on configuration data from the second configuration database, changing the functional scope and/or a basic setting of the infotainment application by means of the configuration interface of the control unit based on configuration data from the first configuration database.

Description

 Method for configuring infotainment applications in a motor vehicle

The invention relates to a method for configuring infotainment applications in a motor vehicle.

From DE 100 44 917 A1 a method for the use of functions and

Performance features in a motor vehicle, in which the motor vehicle

in terms of hardware, it is designed to utilize all functions with maximum performance features, whereby functions can be disabled by software and / or features, whereby a user of a motor vehicle can temporarily or permanently request functions or features which are then temporarily or permanently released by software.

WO 02/17184 A1 discloses a "Total Fleet Logistics" system, which allows vehicle diagnosis, vehicle monitoring, vehicle configuration and vehicle programming to be carried out by, for example, a fleet operator via the Internet.

From the prior art, however, are not satisfactory solutions for the

Configuration of infotainment applications in motor vehicles of a fleet association known. The methods known for this purpose are generally limited to written instructions from the fleet operator to the users of the individual fleet vehicles.

It is an object of the invention to provide an improved method of configuring

Indicate infotainment applications in motor vehicles of a vehicle fleet.

This object is achieved by a method according to claim 1. Advantageous

Embodiments and developments of the invention will become apparent from the dependent claims.

It is assumed that the motor vehicle side of a motor vehicle with at least one

Infotainment and with a control unit, which s.der at least one

Infotainment application is involved. The term infotainment is to be understood in the context of a motor vehicle as an umbrella term for the areas of information, communication and Entertainment (entertainment). An infotainment application of a motor vehicle thus means applications in the context of navigation, telephone, telematics, radio, audio, video, email, Internet as well as future developments, supplements and / or substitutions of such applications.

The control unit, which is involved in the at least one infotainment application, has a configuration interface via which it can be configured such that the functional scope and / or a basic setting of the infotainment application is changed. A change in the range of functions of the infotainment application, for example, consist in the activation of a navigation function in the activation of an intranet service or in the activation of a TV function even when the motor vehicle. A change in a basic setting of the infotainment application can consist, for example, in the definition of a home address for a navigation system, in the configuration of an e-mail account or in the configuration of an intranet access.

Also provided on the motor vehicle side is a first configuration data server, which is separate from the device by the device, and has an associated first

Configuration database for vehicle-related storage of configuration data.

Remote from the motor vehicle becomes stationary at a service center a second

Configuration data server provided with an associated second

Configuration database for the central storage of configuration data. There is a wireless connection between the first and second configuration data servers

Communication link.

The service center can be operated, for example, by a vehicle manufacturer or OEM and / or arranged spatially in this.

The configuration data of the second configuration database can be configured via at least two modification interfaces. An essential difference of the at least two modification interfaces consists in the access rights, the one over the respective

Modification interface to the second configuration database Access to be granted. Via a first modification interface, the configuration data is the second configuration database with first access rights modifiable, via a second modification interface, the configuration data of the second configuration database can be modified with second access rights, which differ from the first access rights.

The first modification interface is preferably not internet-based.

Preferably, it is designed to be cable-bound, and preferably only a very specific arithmetic unit and / or a limited number of arithmetic units, for example all arithmetic units in a local wired network, can access the second configuration database via the first modification interface. Preferably, the first modification interface is alternatively or additionally included only

Availability and use of corresponding first access data accessible. The first

Modification interface is thus particularly suitable for modifications of the second

Configuration database by a vehicle manufacturer or OEM.

For the sake of completeness it should be noted that the first modification interface can basically also be internet-based - even if it is primarily for

Modifications of the second configuration database by a vehicle manufacturer or OEM is provided and when the service center is spatially arranged at the vehicle manufacturer or OEM.

The second modification interface is internet-based. Preferably, it is implemented on the basis of known web and / or client / server technologies. According to a preferred embodiment of the invention, when a corresponding second access data is available from a conventional PC connected to the Internet, the second modification interface can be accessed. The second modification interface is therefore particularly suitable for modifications of the second configuration database by a fleet operator.

The first access rights and the second access rights can be set disjoint, ie in such a way that completely different accesses from a device accessing via the first modification interface are possible than accessing via the second modification interface. However, there may also be a certain intersection or a certain overlap of the access rights. According to a preferred embodiment of the invention, a third, also internal-based modification interface of the second configuration database is additionally provided, via which configuration data of the second configuration database with third access rights, which again differ from the first and second access rights, are modifiable. The third modification interface is thus suitable for modifications of the second configuration database by the users of fleet vehicles and / or

Service Provider and / or Application Provider. However, such a modification interface can also be reserved for one of the named user groups, while for the other user groups own internet-based modification interfaces with own access rights are provided. Also the third modification interface and possibly further

Modification interfaces is preferably secured by corresponding access data.

Possible modifications of the configuration data of the second configuration database are recognized either by the service center and / or by the motor vehicle communicating with the service center. For example, it is possible to implement a recognition of modifications of the configuration data of the second configuration database in such a way that the configuration data are accessible after access via one of the

Modification interfaces are considered changed. However, it can also be checked, for example, whether actually changing accesses have been made and / or the data status can be adjusted to changes with an earlier data status.

Periodically (e.g., cyclically), at fixed times, and / or upon detecting a change in data status of the configuration data of the second configuration database (i.e., in a sense "in response" to recognition) are transmitted over the wireless

Communication connection between the first and second configuration data server Configuration data of the first configuration database changed. This is done based on configuration data from the second configuration database, preferably only based on previously changed configuration data from the second configuration database.

Accordingly, preferably not all, but only selected

Configuration data of the first configuration database changes, in particular those configuration data of the first configuration database, which are related in content to previously changed configuration data of the second configuration database. On the basis of the configuration data changed from the first configuration database, the functional scope and / or a basic setting of the infotainment application is finally changed via the configuration interface of the control unit. This can also be done either regularly (eg cyclically), at fixed times and / or on detecting a change in the data status of the configuration data of the first

Configuration database (i.e., in a sense "in response" to recognition).

Preferably, a basic setting of the infotainment application is changed and the default setting is a basic setting related to the management of personal information management data. Accordingly, the infotainment application is preferably an application that manages - at least among other things - personal information management data, e.g. an email client.

In the meantime, the term "personal information management data", which is now established in professional circles, is understood to mean electronically present personal data such as contacts, appointments, tasks, notes, documents such as letters, faxes, SMS, emails, RSS feeds, as well as today's equivalents , future developments, supplements and / or

Substitutions of such data.

Preferably, in the manner described such changes of

Scope of functions and / or the basic setting of the infotainment application, which is not available in the motor vehicle operating means, in particular not the

"Conventional operating means" (push buttons, touchpad, keyboard, pressure / rotation controller, etc.) of the motor vehicle, are feasible.

If necessary, made specifications of the functional scope and / or the basic setting but can be displayed with the aid of operating means available in the motor vehicle. If, for example, an email client is configured in the described manner, the settings (email server, account name, ...) can be used for one

Although vehicle occupants on a display unit can be displayed, but not changeable.

According to a preferred embodiment of the invention are via the wireless

Communication connection between motor vehicle and service center data, in particular So-called Certificate Signing Requests or other configuration and

Authentication-relevant data can be stored or stored by the first configuration data server in the second configuration data server.

Such certificate signing requests to a locally generated secret key are preferably prefilled by a controller at "its", i.e. its associated one

Configuration interface, and / or stored in the configuration data server.

In certain cases, the secret access key is generated in the vehicle and never leaves it. The vehicle generates a "Certificate Signing Request" containing the associated public key, which must be signed by the "Certificate Authority" relevant to a particular access authorization and transferred back to the vehicle as a certificate. With this certificate and the secret key, the vehicle application then receives access to, for example, the

Corporate data.

Hereinafter, a preferred one will be with reference to the single attached drawing

Embodiment of the invention described. This results in further details, preferred embodiments and further developments of the invention. It shows schematically and by way of example

Fig. 1 shows the architecture of an apparatus for implementing the method according to the invention.

According to the prior art, functions in the area of information, communication and entertainment (umbrella term: infotainment) in modern motor vehicles are generally unlimited and can be configured exclusively by the respective end user. One of the few exceptions to this is a suspension of certain functions by the vehicle manufacturer, e.g. in the form that the end user must first enter an unlock code before he can use the respective function.

A configuration of infotainment applications is known, for example, in the form that the end user is given the opportunity, via control means in the vehicle or from the Distance via an online portal to configure an email client or access to an email server.

A satisfactory central management for the configuration of infotainment systems, such as by a fleet manager, is not possible with the devices and methods. Also functions of the infotainment systems in the vehicle can not be limited so far usually by third parties. Relevant configuration parameters are usually only changeable today either via coding, activation or provisioning of the vehicle. Such processes can today usually only be used by the vehicle manufacturer and are also very dependent on the respective market or country from the point of view of the vehicle configuration.

The prior art and the above known methods and devices lead to the following disadvantageous aspects.

A first aspect 1 relates to the configuration by the customer or end user:

The end user is confronted with the task of correctly configuring the infotainment systems. This leads to a "correct" or uniform

 Configuration over all vehicles of a vehicle fleet away hardly or is not ensured. In addition, the vehicle may also be required to access company resources, e.g. for company cars and fleets. The vehicle or any backend operated by the vehicle manufacturer basically acts as a stand-alone device and is therefore not part of the IT infrastructure of the customer's company (using the vehicle fleet). In order to have a working configuration in all or as many vehicles as possible

Therefore, the IT management of the customer's company must inform all end users (eg employees of the customer's company) of the correct configuration. If necessary, secrets must also be exchanged (eg user IDs, passwords, secret keys and certificates), which could also be misused. The customer company thus loses control of such secrets according to the state of the art. Furthermore, the customer company has no control over the configuration of the deployed IT systems in the vehicle and in the backend. With the proliferation and expansion of so-called personal information management (PIM) functionalities in infotainment systems more modern

Motor vehicles are increasingly processing personal data, which is usually confidential. Are these PIM data company-related, e.g. Business emails or appointments, processing in external equipment is usually not allowed. This can lead to the paradoxical situation that the vehicle infotainment systems provide technically perfect PIM functions, but that they may not be used by the end user because of the lack of control by the customer company. Iter aspect concerns the possibility (which is often absent in the prior art) to use functions:

As far as information technology systems in companies (and outside of motor vehicles) are concerned, it is customary today for the IT management of the company to set standards with regard to the use and configuration of these devices, and also enforce them technically in the form of security policies and policies.

Satisfactory possibilities to do the same with vehicle infotainment systems do not yet exist. For example, a customer company or vehicle rental company can not impose restrictions and specifications regarding the configuration and use of the information, communication and entertainment functions of the vehicle.

Although customer-facing companies now frequently make specifications for fleet vehicles with regard to a vehicle manufacturer and demand restrictions in the functions, for example as to which functions can be operated while driving. The vehicle manufacturer can react to it today but only with relatively high effort, namely by either making an individual restriction for individual or all vehicles that are delivered to the respective customer company or a corresponding restriction is even accepted for all customers. In contrast, it would be much more advantageous if, instead, a fleet manager or the IT management of the customer company itself could configure restrictions in the vehicle. Even business models could be linked to a corresponding configurability. Car rental companies can not currently bill additional functions separately, eg the use of a navigation system. The customer is therefore offered either a vehicle with or without navigation system. On the basis of the presented method, a navigation application could be unlocked by the rental car company if necessary.

A third aspect 3 relates to a policy-based software sale or a policy-based software rental for vehicle functions:

Due to the very limited possibilities according to the prior art of activating or deactivating software-based vehicle functions, it is generally not possible today to provide an end user with a specific function or application for a limited time only. Based on the featured

 The method would make it possible to rent a navigation application, for example for the period of a holiday or business trip (from the perspective of the customer) or unlock it (from the point of view of the customer company and / or from the perspective of the vehicle manufacturer).

The proposed method allows a remotely vornehmbare, central

Configuration of the information, communication and entertainment systems of the

Motor vehicle e.g. through the IT management of a company, through one

Service provider, by a fleet operator, by a rental car hire company, or by a vehicle manufacturer or its dealer network. The end user of the vehicle is relieved of this task.

The presented method further enables a restriction of the functionality or configuration settings in the information, communication and entertainment systems in the vehicle by the use of policies and policies by an authorized authority, e.g. the IT management of a company, by a service provider, by one

Fleet operator, by a hired car rental company or by a vehicle manufacturer. A car hire company and / or a vehicle manufacturer can thus provide certain functions for an additional charge or otherwise limit. On the basis of the presented procedure, customer-side companies will be able to treat the information, communication and entertainment systems of the motor vehicle as part of the IT infrastructure of the customer's company. Access to confidential company resources such as email servers, intranets, calendars, VPNs etc. can thus be configured and limited by the company itself.

A preferred technical device or architecture for implementing the invention is constructed schematically as follows: (see FIG.

In the electrical system of the motor vehicle 10 is at least one electronic control unit,

optionally also several electronic control devices (in Fig. 1, there are exactly three

ECUs) are equipped with a "Configuration and Policy Client" 11, 12, 13, via which the functions provided by the respective control unit can be configured or limited, for example, the navigation can be set so that destination entry is only possible while standing, or the email application can be configured correctly.

The configuration data and guidelines / policies refers to the "Configuration and Policy serves" of a (vehicle) central, in an electronic control unit in the vehicle

Implemented "In-vehicle configuration and policy server and database" 14, in which all configurations and policies / policies are provided centrally.

According to an optional but preferred embodiment of the presented method, one or more control units in the electrical system of the motor vehicle 10 may deposit a "Certificate Signing Request" for a locally generated, secret key in the "Configuration and Policy Client" 11, 12, 13. The following use case can thus be implemented on the basis of the infrastructure shown in FIG. 1: the secret key is generated in the vehicle. For this purpose, a Certificate Signing Request is generated, which is to a located outside the vehicle Certificate Authority (CA) - this may be the CA of the vehicle manufacturer in particular - be signed and then transferred as a signed certificate back into the vehicle.

The "Configuration and Policy serves" 11, 12, 13 regularly updates the relevant ones

Configuration and policy data from this "In-vehicle configuration and policy server and database "14. Conversely, when updating the data in the" in-vehicle configuration and policy server and database "14 also a notification of the clients 11, 12, 13 made about the change. This can be called a "configuration and policy push".

According to another optional, but preferred, expression of the presented

In the method, the "Configuration and Policy" 11, 12, 13 may deposit information in the "in-vehicle configuration and policy server and database" 14, e.g., "Certificate Signing."

Requests "or other, configuration and authentication relevant data.

Conventional cryptographic methods optionally ensure that the configuration and policy data are confidential, authentic and / or tamper-free.

Via a communication device installed in the vehicle (eg GSM, GPRS, UMTS, Wimax, WLAN or LTE module) 15 or via a consumer electronics introduced by the end user (and connected via a corresponding interface "CE device interface" 16) (CE) Device 17 (or also Portable Communication Device) 17 communicates the "in-vehicle configuration and policy server and database" 14 with a backend, the configuration and policy backend 20. The core component of the backend 20 is the "backend configuration and policy server and database "22, in which all relevant configuration and policy data is stored. The communication takes place via a wireless communication link between the communication device 15 or the CE device 17 and a communication device 21 connected to the "backend configuration and policy server and database" 22.

In contrast to the vehicle system 10, the back-end 20 is constantly available and can serve several vehicles. In the "backend configuration and policy server and database" 22 are centrally the configuration and policy data, which are retrieved in regular cycles by the "in-vehicle configuration and policy server and database" 14 by changes in the vehicle 10 are transmitted ,

According to another optional, but preferred, expression of the presented

In this case, the "In-vehicle configuration and policy server and database" 14 may (possibly) store data there, eg "Certificate Signing Requests" or other configuration and update authentication-relevant data in the "Backend configuration and policy server and database".

Conventional cryptographic methods optionally ensure that the configuration and policy data are confidential, authentic and / or tamper-free.

Data stored in the "backend configuration and policy server and database" 22 may include, but are not limited to:

Settings, e.g. Configuration of email accounts, user information such as email addresses, favorites, bookmarks, navigation destinations, wallpapers, personalization, channel listings, news channels, etc.

 Authentication data, e.g. Usernames and passwords, secret keys, certificates (e.g., for Certificate Based Authentication, e.g., when retrieving corporate email), etc.

 "Certificate Signing Requests" generated by subscribers of the on-board network of the motor vehicle and which must be transmitted to a certificate authority (CA) of the vehicle manufacturer and / or an authorized third party Policies and policies, eg limitations of certain functions in certain situations, restrictions on Parameters like

 Speed or location or time or frequency of use, communication partner restrictions, import / import restrictions

 Export interfaces, password quality requirements, frequency of changing the password for accessing information (e.g., company emails), defaults on auto-erasing data storage in the vehicle after incorrect password entry, etc., binding specifications for a particular vehicle key, etc.

 Authorizations, e.g. Unlocks of vehicle keys for a vehicle, or replacement of the function of the vehicle key with other access keys, e.g. Username and password.

Instructions to be executed by the vehicle to protect the company's IT infrastructure in the event of improper use, eg the theft of the vehicle, eg deletion of data stored in the vehicle such as e-mails, telephone directories etc. and access rights / secrets. The data stored in the "backend configuration and policy server and database" 22 can be processed by the vehicle manufacturer 30 and / or by an authorized third party 40, 50, 60 via a "policy configuration user interface" 23, 24.

For access by the vehicle manufacturer 30, a separate first policy configuration user interface 23 may be provided for vendor configurable policies. Interface 23 in the present case is not Internet-based. In particular, access may be based on web or client / server technologies. At the vehicle manufacturer, a "Policy

Configuration User Interface Client "32 executed.

For the, preferably Internet-based, access of authorized third parties, a separate second "Policy Configuration User Interface" 24 for specifically by authorized third parties 40, 50, 60, especially end customers, configurable policies ("user configurable policies") may be provided. Web or client / server technologies can be used here. For each authorized third party 40, 50, 60, a "policy configuration user interface client" 42, 52, 62 is executed for this purpose.For the data connection between the back end 20 and the authorized third party 40, 50, 60, a communication device 25 is on the one hand at the back end 20 On the other hand, a communication device 41, 51, 61 is provided for each authorized third party 40, 50, 60. Conventional authentication and encryption techniques can be used for the access.

Qualified third parties may be, in particular, a customer

Company 40, in particular its fleet management or IT management, and / or a rental car rental company.

Authorized third parties may also be end-users 50. End-users, for their part, may either be vehicle owners themselves (and therefore not subject to the instructions or policies of a customer-owned entity) or they may be tenants of one

Rental car or employee of a customer company (subject to the instructions or policies of a client company). Furthermore, authorized third parties may be other so-called "3rd parties" 60, eg service providers (service providers) or application providers (application providers).

The access of the various groups 40, 50, 60 of authorized third parties is based in the present example on the same technology and comparable hardware. However, the different groups 40, 50, 60 of authorized third parties preferably become different

Granted access rights.

Finally, the main advantages of the presented method are summarized and explained using exemplary application scenarios.

The proposed procedure allows a company to control the information, communication and entertainment functions of the vehicle. In prior art methods, control is usually completely subject to the vehicle user. This control is a prerequisite for the vehicle to be integrated into the company's information infrastructure, e.g. by accessing emails, appointments or the intranet. Furthermore, the presented method makes it possible to have the "correct" configuration centrally by a specialist department for a large number of vehicles, so that, in the course of increasing complexity, it is no longer necessary for every end user to completely deal with all functions and their correct configuration.

Among other things, the presented procedure supports the following examples

selected use cases or application scenarios:

A first application scenario concerns the configuration of the functions by the

Fleet manager or the IT management of a customer company:

The presented method makes it possible to centrally control the infotainment functions in the vehicle, i. company-wide to configure by fleet management or IT management. This ensures a uniform configuration across all vehicles in the fleet. The administrator can if necessary the

Lock configuration against modification. ites application scenario concerns the configuration by a service provider:

The presented method allows a third service provider to have a

Configuration that the end user can then activate in the vehicle. For example, an email provider (such as GOOGLE MAIL) could offer a feature that automatically configures the vehicle so that emails can be retrieved in the vehicle. The vehicle user can then simply import the correct configuration into his vehicle. This application scenario concerns the blocking of individual functions:

A customer-owned company or a rental car company may block functions in the infotainment area for their own vehicles. For example, the maximum volume of the music can be limited, destination entry can be prevented while driving, or navigation to foreign countries can be prevented. Policies and policies can be used to restrict the functions individually. The rental car company may, for example, unlock the navigation or the television individually, depending on which tariff the car rental customer has booked. This possibility also applies analogously to the vehicle manufacturer (for example, activation of the navigation for a certain period of time). The application scenario concerns the use of security policies:

Since the vehicle infotainment system is used for business information, e.g. Emails or address book can be used, and this information normally

Security policies of the company, it may be useful to enforce these safety guidelines technically in the vehicle. The presented method makes this possible, for example by blocking certain functions such as data exports, or by making prescriptions for use, eg in the form of password protection of sufficient quality or binding to a specific vehicle key. If necessary, for example, all data stored in the vehicle can be automatically deleted if a safety policy is violated. Security policies may include, but are not limited to, web pages that the end user may access. The first application scenario concerns a so-called "configuration roaming":

Moreover, the proposed method makes it possible not to bind the configuration to a specific vehicle, but rather to a specific vehicle key or a specific person who has authenticated via user name / password, via a CE device or via other authentication means. For example, an individual configuration could always follow the end user into the vehicle he is currently using.

Claims

claims A method of configuring infotainment applications in a motor vehicle (10), comprising the steps of:  Providing a motor vehicle (10) with at least one infotainment application and with a control device which is involved in the at least one infotainment application,  Providing a configuration interface (11, 12, 13) of the control unit, via which the control unit can be configured in such a way that the range of functions and / or a basic setting of the infotainment application is changed,  Provision of a first configuration data server (14) arranged at the motor vehicle and device-specifically separated from the control unit, with an associated first configuration database for vehicle-related storage of configuration data,  • Providing a stationary away from the motor vehicle arranged  Service center (20) with a second configuration data server (22) arranged there and a second configuration database for the central storage of configuration data,  Providing a wireless communication link (15, 21) between the first and second configuration data servers,  Providing a first modification interface (23, 32) via which  Configuration data of the second configuration database can be modified with first access rights,  Providing a second Internet-based modification interface (24, 25, 41, 42), via which configuration data of the second configuration database with second access rights, which differ from the first access rights, are modifiable,  • Detecting modifications to the configuration data of the second  Configuration database Modifying configuration data of the first configuration database via the wireless communication connection based on configuration data from the second configuration database, • Modifying the functionality and / or basic setting of the infotainment application via the ECU configuration interface using configuration data from the first configuration database. 2. The method according to claim 1, characterized  a basic setting of the infotainment application related to the management of personal information management data is changed. 3. The method according to any one of claims 1 or 2, characterized  that changing the scope of functions and / or the basic setting of  Infotainment application is not feasible by operating means available in the motor vehicle. 4. The method according to any one of claims 1 to 3, characterized  with the further step:  Providing a third Internet-based modification interface, via which configuration data of the second configuration database with third access rights, which differ from the first and second access rights, can be modified, 5. The method according to any one of claims 1 to 4, characterized  in that the configuration data of the first configuration database is changed in response to the detection of modifications of the configuration data of the second configuration database. 6. The method according to any one of claims 1 to 5, characterized in that the changing of the functional scope and / or a basic setting of the infotainment application takes place via the configuration interface of the control device in response to a change of configuration data of the first configuration database. 7. The method according to any one of claims 1 to 6, characterized  in the change of configuration data of the first configuration database following the detection of modifications of the configuration data of the second configuration database, only selected configuration data of the first configuration database  Configuration database to be changed. 8. The method according to any one of claims 1 to 7, characterized  the service center is operated by a vehicle manufacturer or OEM and that the first modification interface is used for modifications of the vehicle manufacturer or OEM and is not implemented on the Internet. 9. The method according to any one of claims 1 to 8, characterized  that the infotainment application is an email client and  that changing the scope of functions and / or the basic setting of  Infotainment application exists in the configuration of the email client. 10. The method according to any one of claims 1 to 9, characterized  that via the wireless communication connection data, in particular certificate signing requests or other configuration and authentication relevant data, are deposited by the first configuration data server to the second configuration data server. 11. The method according to claim 10, characterized  a certificate signing request is stored by the control unit at the configuration interface assigned to it and / or in the configuration data server.